Self-serve app provisioning with CMK/BYOK is live!

[#1]

CMK - Customer-managed keys for Atlassian Cloud
BYOK - Bring-your-own-key for Atlassian Cloud (no longer offered to new customers)

Hi Atlassian Community 👋

One of the most common pieces of feedback we heard from CMK customers: "Why do I need to open a ticket just to add an app?"

We heard you — and now it’s self-serve.

The problem

Provisioning a new app with CMK used to mean:

Raise a Cloud Support ticket and wait up to several days while our engineers provisioned it by hand.

What’s changed

Org admins can now self-provision enterprise-eligible CMK products (Confluence, Jira, JSM) directly from Admin Hub - in minutes.

The first CMK provisioning in an org still takes ~1 hour behind the scenes (dedicated infrastructure is created for your org), but there's no support ticket, no multi-day wait, and no Atlassian support engineer involved. What once took days now takes minutes to kick off.

Supported:

• Apps with Enterprise plan can now be provisioned with CMK via Atlassian Administration — no support ticket needed.

  • If a CMK add-on exists but no encryption policy has been created, you'll be redirected to the policy creation tab first.

• BYOK customers follow the same flow — you'll see "Bring your own key (BYOK) encryption" in the dropdown instead of CMK.

Not affected:

• Non-Enterprise plans — these are site-tied and follow a different enablement path. (Engineering Work In Progress)

• Customers with neither CMK entitlement nor CMK policy — your app provisioning experience remains the same.

We'd love to hear how the new self-serve flow works for you. Your feedback directly shapes what we build next. 🚀

If you run into any issues or have feedback, drop a comment below or reach out to your account team. For full setup instructions, see the support page. 

Other resources:

• Atlassian Customer-managed keys

• Download the CMK white paper

---

How it works

1. From Atlassian Administration > “Add App”

2. Pick an App to add

3. Enter site name

4. [NEW] Choose Atlassian-managed keys (AMK) or CMK for the app/site

5. Kick off provisioning